---
id: CVE-2022-23933
title: >-
  Potential vulnerabilities have been identified in the system BIOS of certain
  HP PC products which may allow Escalation of Privilege, Arbitrary Code
  Execution, Unauthorized Code Execution, Denial of Service, and Information
  Disclosure.
summary: >-
  Potential vulnerabilities have been identified in the system BIOS of certain
  HP PC products which may allow Escalation of Privilege, Arbitrary Code
  Execution, Unauthorized Code Execution, Denial of Service, and Information
  Disclosure.
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'
vendor: hp
product: pc_bios
affected:
  - pc_bios < 02.07.10
patched:
  - pc_bios 02.07.10
published: '2022-03-11'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T22:17:17.997'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-23933'
references:
  - url: 'https://support.hp.com/us-en/document/ish_5817864-5817896-16'
    label: hp-security-alert@hp.com
  - url: 'https://support.hp.com/us-en/document/ish_5817864-5817896-16'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
epss: 0.00437
epssPercentile: 0.37773
ingestedAt: '2026-10-08T23:16:47.338Z'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-08T21:03:22.962528Z'
---

## Overview

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.

## Affected

- `pc_bios < 02.07.10`

## Remediation

Upgrade past the affected range:

- `pc_bios 02.07.10`